Fuzz testing system for stateful network protocol

Abstract

The invention provides a fuzz testing system for a stateful network protocol, and solves the problem the traditional network protocol fuzz test frame lacks support on complicated stateful protocols. The fuzz testing system comprises a data generation module, a session management module, a monitor and a driving module; the data generation module is used for storing raw data samples and fuzzing raw data based on a rule tree algorithm to generate fuzz testing cases; the session management module is used for connecting one or more requests defined in the fuzz testing cases into a directed acyclic graph, and then performing fuzz testing specific to each path; the monitor comprises a process monitor and a network monitor; the driving module is used for communicating with a to-be-tested target serve, sending test requests and receiving server response messages.

Description

technical field [0001] The invention relates to a fuzzy testing system for a stateful network protocol, which belongs to the field of fuzzy testing. Background technique [0002] Explanation of terms: [0003] Fuzz testing: Fuzz testing is a specific technique of black box testing, which is getting more and more attention in security testing. Its principle is to input a large amount of malformed data into the target program, and find possible security holes in the tested program by monitoring the abnormality of the tested program. It is a typically automatic or semi-automatic process. [0004] Network protocol fuzz testing: A network protocol refers to a collection of rules that must be followed when exchanging information between peer entities communicating with each other in a computer network. In network protocol fuzzing, it is required to identify the interface of the attack, mutate or generate fuzzy values ​​containing errors, then pass these fuzzy values ​​to a targ...

AI Technical Summary

Problems solved by technology

[0010] The present invention provides a stateful network protocol fuzzy testing system, which solves the problem that the traditional network protocol fuzzy testing framework lacks support for complex and stateful protocols, and the problem that the test script generated by the traditional network protocol fuzzy testing framework cannot contain message sequences The entire state sequence, the problem that the coverage of the protocol fuzzing test is not complete enough

Images